https://www.msbiro.net/tags/dependabot/ Recent content in Dependabot on Cloud Native & Open Source: A Team Lead’s Working Journal https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- 0.164.0 en-us Thu, 02 Apr 2026 08:00:00 +0000 https://www.msbiro.net/posts/actui-security-hardening-dependabot-openssf-scorecard/ Thu, 02 Apr 2026 08:00:00 +0000 https://www.msbiro.net/posts/actui-security-hardening-dependabot-openssf-scorecard/ Back from KubeCon EU 2026 with a free Copilot Pro+ subscription, I turned my attention to the security posture of apple-container-tui. Here's how I added Dependabot and OpenSSF Scorecard using GitHub Actions, spec-kit, and the GitHub CLI.